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Abstract 

In a previous paper, we have shown that any Boolean formula can be encoded as a linear programming 
problem in the framework of Bayesian probability theory. When applied to NP-complete algorithms, this 
leads to the fundamental conclusion that P = NP. Now, we implement this concept in elementary arithmetic 
^SJ , and especially in multiplication. This provides a polynomial time deterministic factoring algorithm, while no 

I ■ such algorithm is known to day. This result clearly appeals for a revaluation of the current cryptosystems. 

' The Bayesian arithmetic environment can also be regarded as a toy model for quantum mechanics. 

(N : 

Q ■ 1 Introduction 

, Arithmetic is a part of abstract mathematics, i.e., a theory based, for instance, on Peano axioms and 

' dealing with infinitely many elements. On the other hand, arithmetic is also a practical way of counting and 

computing. Paradoxically, computation rules are not very much concerned by the abstract theory. Instead, 
. only Boolean operations are at work, e.g., in micro-processors. In a previous paper we have shown that 

' Boolean operations can be described in terms of Bayesian probability leading to the stunning result P = NP. 

QWe propose in the present paper to investigate the Bayesian structure of a particular environment, namely, 
■ elementary arithmetic operations. 

C/3 ' In this approach, we start with a Boolean algebra composed of all relevant binary digits involved in a 

, ^ , , Diophantine equation. In order to deal with tractable formulae, it is suitable to introduce internal variables 

beforehand, e.g. carry bits. Now, we construct a Bayesian environment and we account for the rules of 
^— ( ' arithmetic by means of structural equations. These constraints will be further added to a number of specific 

^ . equations corresponding to the input data and a number of universal equations reflecting the laws of logics. 

0\ ■ The Bay esian method consists in checking the consistency of all these conditions by linear programming 

^^O ' (LP). When feasible, the undefined bits are eventually computed. 

The model is founded on the theory of probability. Nevertheless, when the LP problem is feasible in the 
' general environment, the system always accept strictly deterministic solutions. This is easily proved [l| by 

^SJ , exploring the full ensemble of possible assignments. By contrast, in the present arithmetic environment, the 

T-H ' use of internal variables impose a limitation in the set of accessible assignments, because internal variables 

04 ' cannot be assigned independently. Therefore only a part of the potential assignments can be consistently 

, explored and the proof is no longer valid. As a result, a feasible LP problem may or not accept deterministic 

^ ' solutions. For instance, in the factoring algorithm, the LP problem is generally feasible: When the input 

• I integer is composite, its factors are derived from the deterministic solutions. On the contrary, when the input 

. is prime, we have no deterministic non-trivial factors but we do have probabilistic solutions. In this respect, 

the Bayesian system can be regarded as a toy model of quantum formalism: a 'composite system' is likened 
to a classical object with deterministic parameters while a 'prime system' is likened to a quantum object 
with only probabilistic parameters. We will shortly sketch an example in Sec. 13.31 Fortunately, LP is quite 
efficient to compute the existing deterministic solutions or decide with certainty that no such solution exists. 
Thus, we obtain both a deterministic polynomial time factoring algorithm and a deterministic polynomial 
time criterion of primality. Presently, only a quantum algorithm is known for the first case 2] and a class- P 
algorithm was only found recently [3| for the second case. 

The general framework of the theory is the following: We consider a Boolean binary algebra with A'^ 
variables Xi, for i £ ll,N^. Thus, we may potentially assign a value or 1 to each variable. We name 
complete assignment a full assignment to the A'^ variables and partial assignment an assignment to less 
than N variables. We note Xi the negation of Xi, and call literal a variable or its negation. Given two 
logical formulae (or decision functions) fi and f2, it is convenient to note (fi;f2) (with a semicolon) the 
conjunction fi Af2 and (fi,f2) (with a comma) the disjunction fi Vf2. We name requirement a conjunction of 
literals, complete requirement a conjunction of A'^ literals, e.g., H — (Xi;X2; . . . ;Xjv), that is satisfiable by a 
complete assignment, e.g., f = (1, 0, . . . , 1), and partial requirement a conjunction of less than N literals, e.g., 
(Xi;Xj ;Xfc). Clearly, there are 2^ different complete assignments and therefore 2^ complete requirements. 

2^ 

On the other hand, with up to A'' variables, it is possible to construct 2 different decision functions. 
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Now, we propose to regard any decision function as a random event and to reformulate the logical 
equations as a set of linear equations between the probabilities of the relevant requirements. For this, we 
use the Bayesian conception of the theory of probability [J. Given by hypothesis that a particular logical 
proposition (A) has to be satisfied, the probability of any event will be conditioned by (A). For instance, in 
the conventional addition of two integers U and V, (A) will be the statement (E) that the two integers U 
and V sum to a third integer S. 

The basic probability set is the ensemble Q — {H} of all 2^ complete requirements, labelled by the 2^ 
complete assignments ^. Since the cardinality of D, is finite, the power set 'P(f2), of cardinality 2^ , is a 
sigma-algebra T, identical to the ensemble of all decision functions. Now we have to define a probability 
distribution P on T conditioned by (A). Finally, the Kolmogorov probability space is (f2,T, P). 

We start with the prior information that (A) is TRUE and determine how this knowledge affects the 
conditional probability of the relevant requirements. It turns out that these constraints are conveniently 
formulated as a LP problem. Therefore, we complete the computation by solving this LP problem. For 
NP- algorithms, the number of relevant requirements scales as 0{N^), where K is an integer. Thus, the LP 
solutions are obtained in polynomial time. 

In this paper, we will investigate the behaviour of elementary arithmetic operations in such a Bayesian 
context. We will first implement with full details the Bayesian addition. Needless to say that the method is 
completely maladjusted for practical operations and cannot compete with a direct computation. However 
the derivation is quite simple and adequate to clarify the present concept. Furthermore, Bayesian addition is 
a part of Bayesian multiplication: Again, the method is by far too complicated when compared with a direct 
product but the interest lies in the inverse problem, namely factorization. Even for this last problem, the 
method, at least in its present state, is complicated for small numbers. But the unique feature is clearly the 
scaling capability: Factorization of an integer of n bits is obtained by LP in a system of O(n^) unknowns. 
This remains the only possibility to factorize integers of hundreds or even thousands of bits. 



2 Addition of two integers 

Let U and V be two integers. Without loss of generality we can assume that they are both described by the 
same number n of bits, given that we may complete by a number of zeros if necessary. Let S — U + V he 
the sum. The binary expansions read, 

n—l 71—1 n 

u = Y^ ua \y = ; 5 = [/ + 1/ = ^ sa 

i = i=0 i=0 

with Ui, Vi, Si £ {0, 1}. It is suitable to introduce carry bits explicitly. 

Example: Let n = 2 and let be the carry bits. The binary operation can be written as 



u 




Ul 


Uo 


V 




Vl 


vo 


R 


r-2 


ri 




s 


S2 


Sl 


So 



In Bayesian arithmetic, all bits, including the carry bits are considered as random variables. The assignments 
Ui, Vi, Si and ri are likened to the outcomes of these random variables, respectively Ui, Vi, Si and Ri. 

Let E be the logical proposition: '5 is the sum of U and V. We will compute the conditional probabilities 
of all events given E. 

We have first to define the input data. Provisionally, we suppose that U and V are given, but it would be 
possible to choose different inputs, e.g., S and U or even exotic data like carry bits. Then, for i £ |0, n — 1| 
we suppose that Ui = iti and Vi — Vi with certainty, i.e., with a probability 1. The probabilistic formulation 
is 



P(U, =?i,|E) = 1 (1) 
P(V, =7;,|E) = 1. (2) 

The partial probabilities, e.g., P(Ui — iii|E) are regarded as the unknowns of the problem. More generally, 
we will call partial probability the probability of any requirement, conditioned in this section by E, and 
identify such partial probabilities with unknowns (not to be mistaken for the very variables, like e.g. Ui). 
This codification define a set of 2n linear equations that we will call data specific equations. We will next 
define structural equations, expressing the rules of arithmetic, and later universal equations, expressing the 
laws of logics. 

In order to construct the structural equations, let us consider the following one-bit full adder truth table. 
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For 1 = 0, the outcome of the variable Ro is always zero with certainty and therefore this variable will be 
omitted. For i — n we have 

P(S„ = 1|E) = P(R„ = 1|E) (3) 

Therefore, we will not discriminate between Sn and R,i. It will be convenient to keep rather R,i and simply 
omit the variable Sn- 

Example: Let n = 2. We will deal with the following variables; Uo, Ui, Vo, Vi, So, Si, Ri, R2. The 
truth tables for i = 1,0 read respectively 
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Coming back to the general case, we undertake to translate the truth tables into linear equations between 
partial probabilities. This is straightforward because the probability of an union of mutually exclusive events 
is the sum of the probability of each event. 

For instance, we read that (Si — 1) is the union of four mutually exclusive conjunctions, namely, [(Ui — 
1) A (V, = 1) A (R, = 1)], [(U> = 1) A (V, = 0) A (R, = 0)], [(Ui = 0) A (V, = 1) A (R, = 0)] and 
[(Ui = 0) A (Vi = 0) A (Ri — 1)]. Therefore, the probability of (Si = 1) is the sum of the probabilities of the 
four conjunctions. Note that we are not concerned by the event (Si — 0) because its probability is logically 
connected with the probability of (Si — 1). This will be accounted for later, by the universal equations. 

Now we can construct the structural equations of the addition environment by inspection of the truth 
tables. 

- For i G [[1, n — 1] we obtain 2(n — 1) equations, 

P(S, = llE) = P(U» = 0; V, = 0; R» = 1|E) + P(U, = 0; V, = 1; R, = 0|E) 
+ P(U, = 1; V, = 0; R, = 0|E) + P(U> = 1; V, = 1; R, = 1[E) 
P(R,+i = 1|E) = P(U> = 0;V, = 1; R, = IjE) +P(U, = 1;V, = 0; R, = IjE) 
+ P(U, = 1; V, = 1; R, = 0|E) + P(U, = 1; V, = 1; R, = 1|E) 

- For i = 0, we have two particular equations: Since Ro is omitted, we have only one or two relevant 
conjunctions in each equation, 

P(So = IjE) = P(Uo = 0; Vo = 1|E) + P(Uo = 1; Vo = 0|E) 
P(Ri = 1|E) =P(Uo = l;Vo = llE). 

- For i = n, since we have omitted Sn Eq.Q is unnecessary and we have nothing to set down. 

We have then completed the construction of the 2n structural equations. With the 2n specific data 
equations we have a total of 4n equations. 

On the other hand, we have 4n random variables, namely Ui for i £ [[0, n — 1], Vi for i £ |0,n — 1], Si 
for i G [[0, n — 1] and Ri pour i G It is suitable to bring together these 4n variables in a single list 

Xfc of global variables, labelled from k — 1 to k = 4n. We will adopt throughout the labelling convention of 
table [1] For instance, we have 

Xfc < = ' Sfc-2n-i if G I2n + 1, 3n] 



Example: Let n = 2. The addition can be written in terms of global variables as, 
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i e [0, n - 1] 


i e [0, n - 1] 


i e [0, n - 1] 


i = n 


i e 


k = i + l 


fc = i + n + 1 


fc = i + 2n + 1 
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fc = j + 3n 


fcg [l,n] 


fc e [n + 1, 2n] 


fc e pn + l,3n] 


k = in 


fc e [3n+ l,4n] 
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Xfc 
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Xfc 



Table 1: Labelling convention of the global variables Xfc corresponding to the variables Ui, , Si and R; in the addition of two 
integers U et V 
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1) + P(j; ~j - n; j + 3n - 1) + P(i; i + n; -J - 3n + 1) + P(j; j + n; j + 3n - 1) 



Table 2: Structural equations of addition expressed in terms of global variables (j S [2,n|). We have a total of 2n structural 
equations. 



Thanks to this notation, it is possible to make use of a shortcut: We will simply write [k) to describe the 
formula (Xfc = omitting both the reference to X and the condition E. Similarly, we will note ( — fc) for 

(Xfc = 0|E). Now, we replace (Ui = 1|E) by [i + 1) and (Ui = 0|E) by (-i - 1). The formula (Vi = 1|E) is 
replaced by (i + l + n) , (Si = 1|E) is replaced by (i + l + 2n) and for i > 0, (Ri = 1|E) is replaced by (i + 3n). 
Finally, the set of structural equations are gathered together in Table [5] (where j = i + 1 for simplicity). 

To sum up, we have 2n specific data equation to specify the two input integers U and V and 2n structural 
equations to describe the arithmetic operation of addition. 

Example: Let n = 2 and consider the addition 2 + 3. We have ito = 0, ui = 1, t;o = 1 and wi = 1. The 
4?! = 8 equations read: 

P(l) = 0; P(-2) = 0; P(-3) = 0; P(-4) = 0. 
P(5) = P(l;-3) + P(-l;3) 

P(6) = P(-2; -4; 7) + P(-2; 4; -7) + P(2; -4; -7) + P(2; 4; 7) (4) 
P(7) =P(1;3) 

P(8) = P(-2; 4; 7) + P(2; -4; 7) + P(2; 4; -7) + P(2; 4; 7) 

(We have arbitrary chosen to formulate the data equations with zero right hand side). 

Remark: We have presented the conventional addition of two integers U and V . Actually, the Bayesian 
addition also fits onto operations where the input data are not necessarily the bits of U and V but any set of 
assignments among the An variables. Let n;, be this number of data bits. We have then 2n + ri;, equations. 



Equations 


number 


data 

structural 
Total 


rib 
2n 
2n + rib 



For instance, if n = 2 and if we consider the subtraction 5 — 2, we have rib = 5 and the data specific equations 
read 

P(l) = 0; P(-2) = 0; P(-5) = 0; P(6) = 0; P(-8) = 0. (5) 
More generally, we may even specify any set of relevant unknowns, that we are going to define. 

Relevant unknowns: The unknowns of the LP problem are primary the partial probabilities involved 
in the set of specific or structural equations. However, these relevant partial probabilities are also involved 
in universal equations expressing the rules of logics. For instance the equation P(fc) — entails the logical 
consequence P(— fc) — 1. We will name P( — fc) a variant of P(fc). Similarly, the use of the relevant unknown 
P(fci; fc2) entails the need to account for the logical consequence P(fci) ~ P(fci; fc2) + P(fci; — fc2) and we will 
also name P(fci) and P(fci; — fc2) variants of P(fci; fc2). In practice, we list all partial probabilities involved in 
all specific and structural equations: We obtain the variants by iteration in removing one or several literals 
or in switching a literal into its negation. 

The relevant unknowns are the partial probabilities involved in the specific or structural equations or the 
variants of these partial probabilities. 

In order to list the relevant unknowns, let us define a positive unknown as an unknown involving only 
variables and no negation. For instance, P(fci; fc2; . . . ) will be called positive if and only if fci, fc2, • ■ • > 0. 
Now, let us inspect the different equations: 
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P(k) 

P(l; n + 1) ; P{« + 1; i + 1 + n) ; P(i + 1; i + 3n) ; P(i + 1 + n; i + 3n) 
P(j + l;i + 1 + n;i + 3n) 



Table 3: Relevant positive unknowns involved in the addition of 2 integers of n bits, (i G [1, n ~ 1| ; S [1, 4n|). We have a total 
of 8n — 3 positive unknowns. 

- We have 4n variables Xk and thus 4n positive relevant unknowns P(fc) with one literal and finally 8n 
variants with one literal. 

- For the bit i = 0, we have introduced P(l; n + 1), i.e., one positive unknown and thus 4 variants with 
two literals. 

- For each bit i G |1, n — 1] we have introduced P(i + l;i + l+n;j + 3n), i.e., one positive unknown of 
three literal, and thus 3 positive variants with two literals, and finally 8 variants of three literals and 3x4 
variants of 2 literals. 

Collecting these results in Table [31 the numbers of relevant unknowns are the following: 



Literals 


positive unknowns 


unknowns 


1 


4n 


8n 


2 


3n - 2 


1271 - 8 


3 


n~l 


8n - 8 


Total 


8n - 3 


28n - 16 



Example: Let n — 2. We have 28n — 16 = 40 relevant unknowns, namely; 
P(±l, P(±2), P(±3), P(±4), P(±5), P(±6), P(±7), P(±8). 
i = 0: P(±l;±3), 

i = 1: P(±2; ±4; ±7), P(±2; ±4), P(±4; ±7), P(±2; ±7). 
The 8n — 3 = 13 positive relevant unknowns read: 
P(l), P(2), P(3), P(4), P(5), P(6), P(7), P(8), 
P(l;3), P(4;7),P(2;7), P(2;4), 
P(2;4; 7). 

Relevant universal equations We are now going to account for the laws of logic. According to 
consistency theorems by Richard Cox 0| these laws are expressed in the quantitative rules of probability 
theory [J. In the present context, they give rise to a number of consistency constraints that we have called 
universal equations. They are conveniently derived from the list of all relevant positive unknowns. 

- For each relevant positive unknown of one literal P(fe) we have one normalization equation: 

l = P(fc) + P(-fc) (6) 

that is a total of 4n equations. 

- For each relevant positive unknown of two literals P(fci; ki), we have 4 consistency equations 

P(±fci) = P(±fci; fea) + P(±fei; -fca) 

P(±fc2) = P(±fc2; fei) + P(±fe2; -fci) ^ ' 

that is a total of 4 x (3n — 2) = 12n — 8 equations. 

- For each relevant positive unknown of three literals P(fci;fc2;fc3), we have 3 x 4 = 12 consistency 
equations, namely 

P(±fci;±fc2) = P(±fci;±fc2;fc3) +P(±fci;±fc2;-fc3) 

P(±fc2; ±ka) = P(±fc2; ifcg; fci) + P(±fc2; ifca; -fci) (8) 
P(±fc3; ±fci) = P(±fc3; ±fci; fe) + P(±fc3; ±fci; -ki) 

that is a total of 12 x (n — 1) equations. 

Collecting these results, the numbers of relevant universal equations are the following: 



literals 


positive unknowns 


universal equations 


1 


4n 


4n 


2 


3n - 2 


12n - 8 


3 


n - 1 


12n - 12 


Total 


8n - 3 


28n - 20 
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Example: Let again n = 2. We have 

- 4n = 8 normalization equations for 8 positive literals, namely 

1 = P(l) + P(-l) ; 1 = P(2) + P(-2) ; 1 = P(3) + P(-3) ; 1 = P(4) + P(-4) 
1 = P(5) + P(-5) ; 1 = P(6) + P(-6) ; 1 = P(7) + P(-7) ; 1 = P(8) + P(-8). ^ ' 

- 4 X (3n — 2) = 16 universal equations corresponding to 3n — 2 = 4 positive unknowns with 2 literals. 

P(±l) = P(±l; 3) + P(±l; -3); P(±3) = P(±3; 1) + P(±3; -1 
P(±2) =P(±2;7) + P(±2;-7); P(±2) = P(±2; 4) + P(±2 
P(±4) = P(±4; 7) + P(±4; -7); P(±4) = P(±4; 2) + P(±4 
P(±7) = P(±7; 4) + P(±7; -4); P(±7) = P(±7; 2) + P(±7 

- 12n — 12 = 12 universal equations for the single 3-literal positive unknown, 



-4 

(10) 

-2) 
-2) 



P(±2; ±4) = P(±2; ±4; 7) + P(±2; ±4: 
P(±4; ±7) = P(±4; ±7; 2) + P(±4; ±7: 
P(±2; ±7) = P(±2; ±7; 4) + P(±2; ±7: 



-7) 

-2) (11) 

-4) 



that is a total of 28n — 20 = 36 relevant universal equations. The total number of equations is then (36 
universal equations) + (8 specific equations) — 44 equations. 

Linear programming implementation At this point, we have completed the conversion of all 
Boolean formulae into linear equations operating in a real vector space of the unknown-vectoTS with N = 
28n — 16 dimensions. Thanks to the set of universal equations, these unknowns can be consistently inter- 
preted as partial probabilities in a Bayesian probability space. Therefore they are non negative. This defines 
a linear programming problem 0,01 which can be solved in polynomial time in A*' = 0(n) If the number 
of data bits is nt, we have a total of nj, + 30n — 20 linear equations, e.g., 32n — 20 for the conventional 
addition. 

Due to the product rule in the probability space we have: 

P(/ci) = ^ P(fci; fe) = ^ P(fci; fe; kg) = 0. 

P(fci) = 1 ^P(fci;fc2) = P(fc2) (12) 

P(fci) = 1 ^ P(fci; fe; fca) = P{k2; fcs) 

It is convenient to take advantage of these relations to simplify the linear system by accounting beforehand 
for the data equations. As a result, a number of equations of the rough system are cancelled and a number 
of unknowns become irrelevant. 

Generally, only deterministic solutions are of interest. Note that deterministic solutions are also separa- 
ble [l[, i.e., the probability of any requirement is the product of the probabilities of its literals, e.g., 

P(fci; fe; ka) = P(fci) x P(fc2) x P(fc3). (13) 

When the LP problem is feasible, we obtain a value for each relevant partial probability. Deterministic 
solutions are in principle computed by LP-optimization in a time 0(n). However, in this simple case of 
addition, it turns out that a feasible problem always accept a deterministic solution and even optimization 
is unnecessary when accounting for Eq.([T2|). The conclusion will be different for multiplication. 

When the LP problem is not feasible, the problem has no solution, e.g., S — U when S < U. 



Example 1: Let n = 1. Consider the addition S = U + V given that U = Q and V = 1. We have 12 
unknowns and 32n — 20 = 12 equations in the rough system: 

P(1)=0; P(-2)=0; 

P(3) = P(2; -1) + P(-2; 1) = ; P(4) = P(2; 1) ; 
P(-l) +P(1) = 1 ; P(-2) + P(2) 
P(-3) +P(3) = 1 ; P(-4)+P(4) 
P(2) =P(2;-1) + P(2;1); P(-2) 
P(l) =P(-2;1) + P(2;1) ; P(-l) 

The rank of the system is 11. When accounting for Eq. 1)12^ . two equations become identically zero and 
thus the four unknowns with more than one literal become irrelevant. We have then, 

P(l) = ; P(-2) = ; 
P(3) =P(-1) ; P(4) = ; 

P(-l) = 1 ; P(2) = 1 ; P(-3) + P(3) = 1 ; P(-4) + P(4) = 1 ; P(-l) = P(2). 

The first row is just the probability formulation of the data: U = ;V — 1. The second row described the two 
structural equations. The last row displays the universal equations. The resolution is straightforward. The 
rank of the linear system is now 8 = 8n and the LP problem is feasible with the conventional deterministic 
solution 5 = 1. 



= 1 ; 
= 1 ; 

P(-2;-l)+P(-2;l) ; 
= P(-2;-l)+P(2;-l). 



(14) 
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Example 2: Let n = 2. Consider the addition S + V given [7 = 2 and V ^ 3. We have 28n - 16 = 40 
unknowns with 44 equations, namely Eqs. (PlI^ fTUlllip . The rank of the rough linear system is 35. The LP 
systeme is feasible. Using Ea. (|12p . the rank is at once lowered to 16 — 8n and all unknowns with more than 
one literal become irrelevant. After Gauss elimination the matrbc is diagonal, so no LP algorithm is needed. 
This result seems general: The system is trivial when accounting for Eq.(I12[I. 

Example 3: Let n — 1. Consider the subtraction V — S — U given that 5 = and U — 1. The linear 
system Ea. (|14|) is still valid, except the first row which is now P(— 1) = 0; P(3) = 0; P(4) — 0. We have still 
12 unknowns but 32n — 19 = 13 equations. The rank of the linear system is 12 and the single solution is 

P(-1) = 0; P(-2) = 2; P(-3) = 1 ; P(-4) = 1 ; P(-2; 1) = 1 ; P(~2;-l) = l; 
P(l) =1; P(2) = -1 ; P(3) = 0; P(4) = ; P(2; 1) =0; P(2;-l) = -l. 

The LP systeme is not feasible because e.g. P(2) < 0. When accounting for Ea. (|12p the linear system is at 
once impossible. However, in general when S < U the linear system is possible but the LP problem is not 
feasible. 

Addition of several integers: The addition of several integers can be performed step by step. We start 
with an integer Uo- We add a first term Ui to obtain a first sum Si and internal variables for the carry bits. 
Next, we add the second term U2 to Si, etc. We will use this process in the next section for the Bayesian 
multiplication. 

Remark on the Bayesian addition. If we just have to add or subtract two integers, the Bayesian environ- 
ment is certainly not a paragon of simplicity. For instance, we have seen that the sum of two integers of two 
bits is solved by a LP problem with 40 unknowns and 44 equations! The same conclusion can be drawn for 
any operation known to be of complexity P. Nevertheless, for exotic problems of the addition environment, 
if we have an input of nt, data bits and no algorithm except a force brute exploration of the 2*"~"'' potential 
assignments, the method will be useful for large n. For what we are concerned, we will use these results in 
a more complex environment, namely, multiplication. 

3 Multiplication 

We now aim to encode the product of two integers A and B in the framework of Bayesian arithmetic. Most 
of the ingredients are directly derived from the previous section and thus we will just have to replicate the 
results with a minimum of details. Let n and m respectively be the number of bits of the two integers. When 
setting down a conventional binary multiplication we have simply to add m terms, Uo, U\,. . . , Um-i- The 
addition will be processed in m — 1 steps. In this context, the integers are 'shifted', that is f/o is composed 
of n bits and the following terms Ut are also composed of n significant bits followed by t zeros. 

3.1 Addition of shifted integers 

Let t G [0, m - 1]. We have 

n-l 
i=0 

Example Let us write the binary additions of shifted integers for n = 2 and m = 3. Let rt,t+i be the 
carry bits. 



Ui 
Ri 


ri3 


U12 
ri2 


Uoi 
Ull 


Uoo 


Si = 


Uo + Ui 


ri3 


S12 


Sll 


Moo 


U2 




U23 


U22 






R2 




r24 r23 








S2 = 


S1 + U2 


r24 S23 


S22 


Sll 


Moo 



We note that we have n significant bits for each integer Uo, Ut, St and a 'carry integer' Rt for t G |1, m— 1] 
(displayed in boldface). Let Uo,i, ^t,t+i, St, t+i and Rt,t+i+i be the random variables describing these integers 
for i G [0, n — 1|. Again, it is suitable to bring together these 3nm — 2n variables in a single list Xfe of global 
variables, labelled from fc = 1 to 3nm — 2n. We will adopt the labelling convention of table [l] 

Example When n = 2 and m = 3 the shifted addition reads, 
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Rt.i 


j G [0, n - 1] 


i 6 t + n - 1] 


i e [t, t + n - 1| 


i e [t + 1, t + n] 


k = 1 + 1 


k = n{3t - 2) + j - i + 1 


A: = n(3t - 1) + i - t + 1 


k = 3nt + i — t 


fce Il,n] 


k G l{3t - 2)n+ 1, (3i - l)n| 


fc e [(St - l)n + l,3tn| 


k G [3tn + l,n(3t + l)]] 


Xi to X„ 


X(3t_2)n+1 to X(3t_i)„ 


X(3t_l)„+l to X3t„ 


X3t„+l to X,i(3t_,_i) 



Table 4: Labelling convention of the global variables Xj, corresponding to the addition of m shifted integers of n bits. We have 
t G [f , m — Ij and a total of 3nm — 2n variables. 



P(2r!.+ 1) 


= P(-2; n + 1) + P{2; -n - 1) 








P(3n + f) 


= P(2;n + f) 








P(2n + i) 


= P(i + 1; -j - n; -i - 3n + 1) + P{-i - 1; « + n; -i - 3n + f ) + P{-j - 1; -i - n; i + 3n - 


1) + P{i + 




n; j + 3n — f ) 


P(3n + i) 


= P(j + 1; j + n; -i - 3n + 1) + P(- t - f ; j + n; j + 3n - 1) + P(t + 1; -i - n; i + 3n - 1) + 


P(i + f;i + 


n;i - 


h 3n - 1) 


ryon ) 


= P(2n; -4n + 1) + P(-2n; An - 1) 








P(4n) 


= P(2n;4?i - 1) 








P(3nt - n + 1) 


= P(3ni - 4n + 2; -3nt + 2n - 1) + P{-3nt + 4n - 2; 3nt - 2n + 1) 








P(3nt + 1) 


= P(3ni - 4n + 2; 3nt - 2n + 1). 








P(3ni -n + i) 


= P(-3nt + 4n - i - 1; -3nt + 2n - i; 3nt + i - 1) + P(-3nt + An - i - l;3nt - 2n + i; -3nt - i + 1) 








+ P(3nt - 4n + i + 1; -3nt + 2n ~ i; -3nt - i + 1) + P{3nt - An + i + l;3nt - 2n 


+ i; 3nt + i 


-1) 




P{3nt + i) 


= P(3nt - 4n + i + l;3nt - 2n + i; -3nt -« + !) + P(3ni - 4n + i + 1; -3nt + 2n - i; 3nt - 










+ P(-3nt + 4n - j - 1; 3nt - 2n + i; 3nt + i - 1) + P(3nt - 4n + i + 1; 3nt - 2n + 


i; 3nt + i — 


1) 




P{3nt) 


= P(-3nt + 2n; -3nt + n;3nt + n - 1) + P{~3nt + 2n; 3nt - n; ~3nt - n + 1) 

+ P{3nt - 2n; -3nt + n; -3nt - n + 1) + P(3nt - 2n; 3nt -n;3nt + n- 1) 








P{3nt + n) 


= P(3n4 — 2n; 3nt — n; —3nt — n + 1) + P(3nt — 2n; —3nt + n; 3nt + n — 1) 

+ P(-3nt + 2n; 3nt - n;3nt + n - 1) + P{3nt - 2n; 3nt - n;3nt + n - 1) 









Table 5: Structural equations of the addition of m shifted integers of n bits, (i G [2, n — 1| ; t G [2, m — We have a total of 
2n(m — 1) equations. 



Uo 
Ui 
Ri 




Xg 


X4 

Xr 


X2 

X3 


Xi 


Si = 


Uo + Ui 




Xg 


Xe 


X5 


Xi 


U2 






Xio 


Xg 






R2 




Xi4 


Xis 








S2 = 


Si + (72 


Xi4 


Xl2 


Xii 


X5 


Xi 



Structural equations Since we proceed with the computation step by step, we just have to bring 
together the structural equations of each step. We extract from the full operation the relevant computation 
section and apply the previous result concerning the addition of two integers. 
First step: For t = 1, the relevant computation section is the following, 



Uo 






Uo,n-l 


• Uo,i 


Uo,2 


Uo,l 


Ui 




Ul,n 


Ul,n-1 


Ul,i 


Ul,2 


Ul,l 


Ri 


ri,n+i 


ri,n 


ri,n-l 


ri,i 


ri,2 




Si 


ri,n+i 


Sl,n 


Sl,n-1 


Si,i 


Si, 2 


Sl,l 



Next steps: For t £ |2,m — 1], the computation section reads. 



St~i 




rt-i,t+n-i 


St_l,t + i 


St-l,t+l 


St-l,t 


Ut 




Ut,t + n-l 


Ut.t + i 


Ut,t+1 


Ut,t 


Rt 


rt,t+n 


rt,t+n-i 


rt,t+i 


rt,t+i 




St 


rt.t+n 


St,t + n-l 


St,t+i 


St,t+1 


St.t 



Collecting the results of each step, be obtain the set of structural equations expressed in terms of global 
variables given in table [5] We have 2n equations per section and m — 1 sections, i.e., a total of 2n(m — 1) 
structural equations. 
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P(fc) 

P(2; n + 1); P{2n; 4n - 1) ; P(3nt - 4n + 2; 3nt ~ 2n + 1) 
P(i + n; j + 3n - 1) ; P(i + 1; i + 3n - 1) ; P(i + 1; i + n) 

P(3nt -2n + i;3nt + i~l) ; P(3nt - 4n + i + 1; 3nt + i - 1) ; P{3nt - 4n + i + l;3nt - 2n + i) 
P(3nt - n; 3ni + n - 1) ; P(3nt - 2n; 3nt + n - 1) ; P(3ni - 2n; 3ni - n) 
P(j + 1; j + n; i + 3n - 1) ; P(3nt - 2n; 3nt ~ n; 3nt + n - 1) 
P(3nt - 4n + j + 1; 3nt - 2n + i; 3nt + i - 1) 



Table 6: Positive unknowns of the addition of m shifted integers of n bits, (i G J2, ^^ — 1| ; t G [2,m — 1| ; G [l,n(3'm — 2)]). 
We have a total of 7mn — 3m — 6n positive unknowns. 



Example: For n = 2 and m = 3, we have 2n(m — 1) = 8 structural equations: 



P(5) 


= P(-2;3)+P(2;-3) 




P(7) 


= P(2;3) 




P(6) 


= P(4;-7)+P(-4; 7) 




P(8) 


= P(4; 7) 




P(ll) 


= P(6;^9)+P(-6;9) 




P(13) 


= P(6;9) 




P(12) 


= P(-8;-10;13)+P(- 


8; 10; -13) + P(8; -10; -13) + P(8; 10; 13) 


P(14) 


= P(8;10;-13) + P(8;- 


-10; 13) + P(-8; 10; 13) + P(8; 10; 13) 



Relevant unknowns In order to list the relevant unknowns, we inspect the structural equations. We 
have (mn — m — n) 3-literal positive unknowns and then 3 x (mn — m — n) 2-literal positive variants. We 
have m direct 2-literal positive unknowns and finally (3mn — 2n) 1-literal positive unknowns. Gathering 
together these results we have a total Imn — 3m — 6n positive unknowns and a total 26mn — 16m — 24n 
unknowns (Table [B]). 



literals 


positive unknowns 


unknowns 


1 


3mn — 2n 


Qmn — 4n 


2 


3mn — 2m — 3n 


12mn — 8m — 12n 


3 


mn ~ m ~ n 


8mn — 8m — 8n 


Total 


Imn — 3m — 6n 


26mn — 16m — 24?! 



Example: Let n = 2 and m = 3, we have 7mn — 3m — 6n = 21 relevant positive unknowns, 
P(fc),/fc = 1 to 14 

P{2; 3), P(7; 4), P(6; 9), P(10; 13), P(8; 13), P(8; 10) 
P(8; 10; 13) 

Relevant universal equations The relevant universal equations are derived from the relevant positive 
unknowns by Eq. ((61 [3 El) . 



literals 


positive unknowns 


universal equations 


1 
2 
3 

Total 


3mn — 2?! 
3mn — 2m — 3n 

mn — m — n 
Imn — 3m — 6n 


3mn — 2n 
12mn — 8m — 12n 
12mn — 12m — 12n 
27mn - 20m - 24n 



For instance, for n = 2 et m = 3, we have 27mn — 20m — 24n = 54 relevant universal equations. 

We have completed the analysis of the addition of m shifted integers of n bits. We have identified 26mn — 
16m — 24n relevant unknowns, 2n(m — 1) structural equations and 21mn — 20m — 24n universal equations, 
but not defined any data equation. We are now ready to apply these results to the very multiplication. 

3.2 Multiplication 

Let A and B be two integers with binary expansions, 

n — 1 m — 1 

A = ^2' a, ; B=^2*6t, 

i=0 t=0 
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Ao to A„_i 


Bo to Bm-l 


i e 10, n - 1] 


t e [[0,m - 1] 


k = i + 3nm — 2n + 1 


k = t + 3nm — n + 1 


k € [3nm — 2n + 1, 3nm — n] 


A; € [3nm — n + 1 , 3nm — n + m| 


Xsnm — 2n+l tO ^'Snm — n 


Xsnm — n + l tO Xa^^m — n + m 



Table 7: Labelling convention of the global variables Xj. corresponding to the variables A^, Bt. This defines a number of mn 
variables. 



Co 


Cl to Cm-l 


Cm to Cm + n-2 


Cm+n — 1 


j = 


jG[l,m-lI 


j G [m, m + n — 2] 


j = m + n — 1 


k = l 


k = 3nj — n + 1 


fc = 3nm — 4n — m + 2 + j 


k = 3nm — 2n 


Xi 


X2n + 1 to X3„„i_4„ + i 


X3nm-4n + 2 tO X3„m_3„ 


Xsnm — 2n 



Table 8: Labelling convention of the global variables X^ corresponding to the variables Cj, already defined in Table 2] to describe 
the variables Uo,o, St,t, Sm-l,j and Rm-l,m+n-i- 



where n and m are the number of bits of A and B respectively. Let C be a third integer and D the logical 
proposition 

n : Ax B = C. 

We suppose throughout that 11 is satisfied. The binary expansion of C reads 

n — lm — l n + m — l 

^ = E E 2'^*««&* = E 2^^. 

i=0 t=0 j=0 

For t e |0, m - 1], define Ut, 

n — 1 t + n — 1 7n—l 

Ut = Y^ 2'+'aibt = "'.'2' so that C = ^ C/t 

i = i=t t = 

Clearly, the integers Ut form a set of m shifted integers as described in the previous section. Thus, we 
will take back the random variables Ut,i, St,i, Rt,i- We will also define new random variables and Bt 
corresponding to the binary expansion of A and B. The binary variables of C are already ranked because 
C — Sm-i- Eventually, we construct a probability space with all these variables, namely Ut,i, St,i, Rt,i, Ai 
and Bt, and define a Bayesian probability distribution P given IT. 

It is necessary to extend the list of global variables Xfe, (Table 3}, in order to account for A and B. 
We will adopt the convention of Table [T] The global variables corresponding to the bits of C = Sm-i are 
recalled in Table |S] 

Example Let n = 2 and m — 3. We have 

Ao = Xi5 ; Ai — Xi6. 

Bo = Xi7 ; Bi — Xi8 ; B2 = X19 ; 

Co = Xi ; Cl = X5 ; C2 = Xii ; C3 — X12 ; C4 = X14 ; 



Structural equations In addition to the structural equations of Table [5l let us consider the truth table 
of the variables Ut,t+i versus Ai and Bt. 



Bt 


A. 


Ut,t + i 














1 





1 








1 


1 


1 



The codification of this truth table into linear equations is straightforward. 

P(Ut,t+» = Ijn) = P(A, = 1; Bt = i|n) 

Thus, we obtain a set of mn new structural equations displayed with the global variable convention in 
Table to be added to the 2mn — 2n equations of table [S] and leading to a total of 3mn — 2n structural 
equations. 



10 



P(i) = P(j + 3nm — 2n + 1; 3nm — n + m + 3) 
P(n(3i - 2) + i - t + 1) = P(i + 3nm - 2n + 1; t + 3nm ~ n + m + 3) 



Table 9: Complementary structural equations of the multiplication (j £ [[0,n ~ 1], t G [[l,m — 1|) in addition to Table [5] The 
number of new equations is mn and the total number of structural equations is 3nm — 2n. 



P(fc) 

P(3nr?i — 2n + 1 + j; 3nm — n + 1 + t) 



Table 10: Complementary positive unknowns of the multiplication in addition to Table [6] (i G [0, ra — 1| ; t a |0, m — 1] ; 
k £ [3nm — 2n + 1, 3nm — n + m]). We have mn + m + n complementary positive unknowns and a total of 8mn — 2m — 5n positive 
unknowns. 

Relevant unknowns Again, we take back the relevant unknowns of the shifted addition (Table We 
have to add n + m new positive relevant unknowns of one literal, namely P(Ai|n) and P(Bt|n) and nm new 
positive relevant unknowns of two literals, namely P(Ai; Bt|n). They are listed in Table [TD] 
Example: Let n = 2 and m = 3. The 11 new relevant positive unknowns are, 

P(15) ; P(16) ; P(17); P(18) ; P(19) 

P(19;15) ; P(19;16) ; P(18;15) ; P(18;16) ; P(17;15) ; P(17;16) 

The unknowns are derived from the positive unknowns from enumeration of the variants. 



literal 


positive unknowns 


unknowns 


universal equations 


1 
2 
3 

Total 


3mn + m — n 
4mn — 2rn — 3n 

mn — m — n 
8mn — 2m — 5n 


6mn + 2m — 2n 
16mn — 8m — 12n 
8mn — 8m — 8n 
30mn - 14m - 22n 


3mn + m — n 
16mn — 8m — 12n 
12mn — 12m — 12n 
31mn — 19m — 25 



Relevant universal equations We derive the relevant universal equations from the list of positive 
unknowns. We have a total of 1 x (3nm — n + m) + 4x (4mn — 2m — 3n) + 12 x {mn — m — n) — 31mn — 19m — 25n 
relevant universal equations. 

In summary, for m, n > 1 we have 

unknowns: 30mn — 14m — 22n 

structural equations: 3mn — 2n 
universal equations: 31mn — 19m — 25n 

3.3 Polynomial time algorithm of factorization 

We are now able to factorize an integer in polynomial time. Let C > 3 be a given integer of c bits, that 
is 2'^~^ < C < 2" . Let A and B be two unknown factors so that C — A x B . Let a and h be the number 
of bits of A and B respectively. We have a + 6— l<c<a + 6. If_B<yl, the trivial solution is yl = C 
and -6 = 1, i.e., a = c and 6=1. All non trivial solutions with B < A are such that a < c and b < c/2. 
In the multiplication environment, we can choose n = c — 1 > 1 and m = [(c + l)/2] > 1, given that we 
may complete the sets of bits by a number of zeros if necessary. Since we have m + n > c, it is convenient 
to define the array Cj = for j £ Jc, m + n — 1]. Now, we construct the LP system of the multiplication 
environment. The system of both structural (Tables [5l|9} and universal equations is complemented with the 
m + n following specific data equations: 

p(c, =c,|n) = i 

where j £ |[0,m + n — 1]. These data equations are translated in Table [TT] in term of global variables 
(using Table 111). 

We have a LP problem of 30mn — 14m — 22 unknowns and 34mn — 18m — 26n equations. Note that the 
equations have a maximum of 3 coefficients with an average of 2 entries. Therefore, the matrix is widely 
sparse. Since m = 0(c) and n = 0(c) the dimension of the problem is O(c^). The detail is the following: 
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P(l) = CO 

P{3nj - n + 1) =Cj for j e [1, m - Ij 
P(3nm — 4n — m + 2 + j) = Cj for j S [m, m + n — 2] 
P(3nm - 2n) = Cm+„_i 



Table 11: Data specific equations for factorization. Tlie numbers Cj are the coefficients of the binary expansion of the input 
integer C for j < c and for j > c. These n + m equations have to be added to the set of structural equations (Tables [5l [9ll and to 
the universal equations. 



unknowns: 30mn — 14m — 22n 
including 

1 literal: 2 x (3mn + m — n) 

2 literals: 4 x (4mn — 2m — 3n) 

3 literals: 8 x (mn — m — n) 
equations: SAmn — 18m — 26n 
including 

structural: 3mn — 2n 

universal: 31mn — 19m — 25n 

data: m + n 

It is suitable to simplify at once the system by use of Ea. (|12|) . 

- If the system is feasible, we have to check whether deterministic solutions exist by optimization. Gener- 
ally, this can be obtained by optimazing a maximum of 2m objective functions. Let ko, k\, . . . , km-i be the 
global labels corresponding to the variables Bo, Bi . . . Bm-i respectively (TableO. We first select the two ob- 
jective functions zq = P(±A:o). If the two ma^cima are both different from 1, then C is prime. Otherwise, we 
have a maximum zi = 1 for say zq — P{—ko). Now, we select two objective functions zi — P(— fco) -l-P(±fei). 
Now, if the two maxima are both different from 2, then again C is prime. Otherwise the maximum 2 is 
obtained e.g., for zi — P(— fco) + P(fci). We iterate with Z2 = P(— fco) + P(fci) + P(±fc2), etc. Finally, we 
select an integer B with P(±fci) — 1 for i £ [0, m — 1] or otherwise C is prime. Finally, we check C'/B. 
Thus, we obtain two factors A and B or prove that C is prime in polynomial time. 

- If the system is not feasible, C is prime with certainty. Again, this result is obtained in polynomial 
time. (However, from our computations, the system seems always feasible). 

Example 1: A trivial problem. Let C = Q and thus c = 3 bits. We can choose m = 2 and n = 2. Even if 
the computation is straightforward, we have nevertheless 48 unknowns and 48 equations and therefore the 
computation is difficult to perform by hand! After Gauss elimination, the rank is 42. The LP problem is 
feasible and since m = n the factors A and B are not implicitly ordered. We obtain the expected conventional 
deterministic solutions (A = 2; B — 3) and {A — 3; 5 = 2) but also a continuous set of non deterministic 
solutions which can be regarded as a superposition of the deterministic solutions (in the quantum sense). 

Example 2: A toy model for quantum mechanics. Let C — 5 and thus c = 3 bits. We can choose m = 2 
and n = 2. We have still 48 unknowns, 48 equations and the rank is 42. Again, the LP problem is feasible but 
only accept non-fully deterministic solution. For instance, if we have P(Ao — l|n) = 1 and P(Bo = 1|II) = 1, 
we do have P(Ai — 1|II) = 1/2 and P(Bi = l|n) = 1/2. Let us open a parenthesis: When contemplating 
the LP problem, it resembles a quantum system. We give a few hints even if a comprehensive discussion 
is clearly beyond the scope of this paper: The prime '5' is a mathematical object defined by the variables 
Cj. We decide to describe this object by a number of artificial variables, like Ai and B^. As a result, the 
outcomes of these new variables may be only defined in probability, depending upon the solution of the LP 
system. Each solution is similar to the setting of a quantum object. When a particular solution/setting 
is chosen, the probabilities are ipso facto determined. They rely on the structure of internal parameters, 
described, e.g., by the symmetry of the feasible LP-polytope In order to force a deterministic outcome, 
we may proceed to a random trial but then, the system collapses, e.g., into two integers and the original 
prime is destroyed. In this respect the LP system of a composite integer like '6' resembles a classical object 
with some quantum features like possible superposition of states. In our opinion, this analogy supports 
the conjecture that quantum formalism is a particular codification of states of knowledge, exactly as the 
Bayesian formulation is. We close this parenthesis. 

For small values of C, when compared with conventional algorithms, one can quite rightly argue that the 
computation complexity is out of all proportions, up to say 100 bits. Actually, the interest of the method 
only arises for big integers, when the conventional algorithms crash into the exponential wall, while the 
Bayesian route remains polynomial. The next examples are potentially in this range but are not in the 
present capability of this author due at least to lack of familiarity with large systems. 

Example 3: The present state of the art. Let C be a 768-bit integer. We can choose m = 384 and 
n = 767. We obtain a rough LP system with 8 813 590 unknowns and 9 987 098 equations which uses 
sparse matrices with three or less non-zero entries per row. The number of 768 bits corresponds to the 
last factorized integer ofthe now obsolete RSA Challenge [9]. The computation was carried out in 2009 by 
an international team [lo|, using the best known algorithm, namely, the Number Field Sieve (NFS) [lH . 
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According to the authors, the overall effort represent 2000 years on a single core 2.2 GHz processor. Most 
of the computation consists in sieving a large number of smooth roots modulo C from a pair of convenient 
polynomials. The last operation is the merging step for Gauss elimination. It produced a 192 796 550 x 
192 795 550 sparse matrix with on average 144 non-zero entries per row solved in one day. Clearly, the 
present Bayesian method is in principle by far simplest than this last operation. 

Example 4-' A challenging computation beyond the present state of the art. Let C be a 1024-bit integer. 
We can choose m — 512 and n — 1023. We obtain a rough LP sparse system with 15 683 606 unknowns and 
17 772 570 equations still with three or less non-zero entries per row. These dimensions may be reduced if 
we know the order of magnitude of the factors. The computation is only twice more difficult than for 768 
bits. Using the NFS algorithm, the factorization of the 1024-bit integer of the RSA challenge is presently 
out of reach but expected by the year 2020 . 

Exemple 5: An outstanding challenging computation. Let C be a 2048-bit integer. The rough system 
dimensions will be about 63. 10^ x 71. 10®. This factorization is definitively out of reach of the NFS algorithm 
but, in principle, still tractable with the present Bayesian method. 



4 Conclusion 

The paper applies previous results on the conversion of an ensemble of Boolean formulae into a linear 
programming problem: Now, we introduce the concept of 'Bayesian arithmetic'. In this model, a Diophantine 
equation is interpreted as a set of prior conditions in the framework of Bayesian probability theory. We have 
shown that the dimension of the LP problem scales as 0(n) for the sum of two n-bit integers and as 0{mn) 
for the product of two integers of m and n bits respectively. As a result, the LP problem encoding a 
Diophantine equation is solved in polynomial time in the number of working bits. 

The first significant application is a polynomial time algorithm of factorization. This stresses the need 
to revisit all current public key encryption systems. 

A similar approach should solve in polynomial time any logical function defined by a set of truth tables. 

Finally, the exponential speed-up over conventional algorithms recalls quantum computation. This ques- 
tions about a deep similarity between LP and quantum mechanics formalism. 
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